Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

I've copy/pasted hijackthis and uninstall_list below as mentioned in the instructions. Please help me as the virus seems to be attacking when I click on any search results and sends me to a whole other page. Plus this virus has been giving me pop ups of other websites connected to google. For example a newspaper website talking about google in an additional tab.Looking forward to a reply within 3 days.

My name is peku006 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

Please observe these rules while we work:

If you don't know or understand something please don't hesitate to ask

Please DO NOT run any other tools or scans whilst I am helping you.

It is important that you reply to this thread. Do not start a new topic.

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).Also take note that remnants of the above program(s) and any other P2P program found will be removed when cleaning.

download and run RSIT

Download random's system information tool (RSIT) by random/random from here and save it to your desktop.

Double click on RSIT.exe to run RSIT.

Click Continue at the disclaimer screen.

Once it has finished, two logs will open. Please post the contents of both log.txt<- (will be maximized) and info.txt<- (will be minimized)

Computer Name: ADMINEvent Code: 1041Message: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

Computer Name: ADMINEvent Code: 1041Message: Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} and it will not be loaded. This is most likely caused by a faulty registration.

Computer Name: ADMINEvent Code: 1041Message: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

Computer Name: ADMINEvent Code: 1041Message: Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} and it will not be loaded. This is most likely caused by a faulty registration.

Computer Name: ADMINEvent Code: 1041Message: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

We will continue with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:This tool is not a toy and not for everyday use.ComboFix SHOULD NOT be used unless requested by a forum helper

When the installation begins, follow the prompts and do not make any changes to default settings.

When installation has finished, make sure you leave both of these checked:

Update Malwarebytes' Anti-Malware

Launch Malwarebytes' Anti-Malware

Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

If an update is found, the program will automatically update itself.

Press the OK button to close that box and continue.

Problems downloading the updates? Manually download them from hereand double-click on "mbam-rules.exe" to install.

On the Scanner tab:

Make sure the "Perform full scan" option is selected.

Then click on the Scan button.

If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.

The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.

When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".

Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

Click on the Show Results button to see a list of any malware that was found.

Check all items except items in the C:\System Volume Information folder... then click on Remove Selected.We will take care of the System Volume Information items later.

When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)

The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.Click OK to either and let MBAM proceed with the disinfection process.If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

NOTE:Save your work.TFC will automatically close any open programs, let it run uninterrupted. It shouldn't take longer take a couple of minutes, and may only take a few seconds. Only if needed will you be prompted to reboot.

The computer is running fine now except for internet explorer. It doesn't open up sometimes. It shows the hour glass image next to the mouse pointer and then doesn't open up. Other than that everything seems to be fine.

If you can help with this too i'd appreciate it. Here is the checkup.txt info:

As you have failed to install the latest Service Pack, SP3, for your Windows XP operating system, it no longer receives updates from Microsoft. Updates are not available for XP computers without SP3 installed, and this has been the case since July, 2010. The longer your system goes without updates, most of which close system vulnerabilities, the more vulnerable your system will become to malware.

Due to a lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.